WordPress 2.0.4 Released

WordPress 2.0.4 has been released.

WordPress 2.0.4, the latest stable release in our Duke series, is available for immediate download. This release contains several important security fixes, so it’s highly recommended for all users. We’ve also rolled in a number of bug fixes (over 50!), so it’s a pretty solid release across the board.

I can’t find any documentation stating the user registration vulnerability has been fixed, but Kelson is reporting it has been taken care of in WordPress 2.0.4. I believe this WordPress release was pushed out quickly due to some information revealed by Dr. Dave earlier in the week.

I’m still not 100% sure that the problems pointed out by Dr. Dave have been fixed. Can anyone confirm that it has been? For those interested, here’s a list of bugs that have been closed as of the 2.0.4 release [via Dougal Campbell].

UPDATE: WordPress 2.0.4 does indeed fix the user registration vulnerability. Dr. Dave has done some testing of his own and seems pretty sure this vuln is fixed. It’s still probably a good idea to disable user registration just to be safe:

As for the “users can register” option: enabling it back should be OK.
I personally will leave it off on my blogs, as I just don’t feel like entrusting strangers with access to wp-admin in the current state of the code (I insist that the aforementioned exploit has been fixed now, I am only being paranoid here).

0

Major Technorati Update

Technorati just released a new interface to the site. They haven’t just made changes to the appearance of the site however.

First, in addition to a simpler and brighter design, we’ve continued to improve our core search technologies that index new information within minutes of being posted to the Web. We listened hard to your feedback – and redesigned the search results pages to include much less intrusive (and well-marked) ads, more results above the fold, and better sorting options – including sorting by language, authority, and freshness. If you’re confused, you can get a deeper explanation of keyword results and of URL results. In addition, our link-counting mechanisms have also been dramatically improved. If you’re a blogger, you should notice that your blog is being counted much more regularly, and that your rankings and authority information is much more accurate and up-to-date.

More regular counting of inbound links is awesome! Ranking and authority updates are nice too, I never put too much weight in those numbers as they never changed very often (maybe that’s good?). They’re also trying to make it easier to discover new content, via their Discover section.

These upgrades look really great overall. They just underwent a redesign not too long ago (back in June of 2005). Wonder what we can expect next year?

Mashable has screenshots of the old Technorati versus the new Technorati.

0